You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Register a free account to unlock additional features at BleepingComputer.com

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Please Help - Something Has Taken Over My Computer!

I think I posted on the wrond thread first so here I am again - I have no clue what I have been infected with - by the way hello this is my first post! When I go to sites all the ads pop up with something twain32 or other things then ad windows just keep popping up and then screens telling me I need their spyware program to remove my virus. Please help!!!

I have uploaded spyware doctor and it cleaned up my system but I still have the same problem. I tried PREVX CSI and still the same thing. I am exhausted and need my computer back. I do not know how to look in all the program files to find the problem.
I appreciate the help in advance!
Shelley

Hi you currently have 2 antivirus programs running.Prevx and Norton System Works.Please uninstall whichever one you intened to keep but one has to go.

I recommend uninstalling both of them and installing AVG freeAs it is always free and a very good Anti Virus.

But if norton is up to date with it's definitions then keep it until it expires.Also if Spy Sweeper is not up to date or if the subscription has expired please uninstall it as well.================================================Please download Deckard's System Scanner (DSS) and save it to your Desktop.

Close all other windows before proceeding.

Double-click on dss.exe and follow the prompts.

When it has finished, dss will open two Notepads main.txt and extra.txt -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.

Edit:Spelling

Edited by kahdah, 28 March 2008 - 11:40 AM.

Please do not pm for help, post it in the forums instead.

If I am helping you and have not responded for 48 hours please send me a pm as I don't always get notifications.

My help is always free, however, if you would like to make a donation to me for the help I have provided please click here

Event Record #/Type75278 / ErrorEvent Submitted/Written: 03/28/2008 01:10:23 AMEvent ID/Source: 7023 / Service Control ManagerEvent Description:The iPod Service service terminated with the following error: %%2147549465

-- End of Deckard's System Scanner: finished at 2008-03-28 13:48:01 ------------

I have to run out for a few hours -taxes and kids! I will read the followup when I get home - thank you so far for helping - I truly appreciate it!

Return to OTMoveIt2, right click in the "Paste List of Files/Folders to be Moved" window (under the light blue bar) and choose Paste.

Click the red Moveit! button.

OTMoveit2 will create a log of moved files in the C:\_OTMoveIt\MovedFiles folder. The log's name will appear as the date and time it was created, with the format mmddyyyy_hhmmss.log. Open this log in Notepad and post its contents in your next reply.

Close OTMoveIt2

If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes.==========================================Please download Malwarebytes' Anti-Malware from Here or Here

Double Click mbam-setup.exe to install the application.

Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded, select "Perform Full Scan", then click Scan.

The scan may take some time to finish,so please be patient.

When the scan is complete, click OK, then Show Results to view the results.

Make sure that everything is checked, and click Remove Selected.

When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.

Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatley.========================After all of that please post back with these logs:New Hijackthis OTMove it 2 log MAlware Bytes antimalware log

Please do not pm for help, post it in the forums instead.

If I am helping you and have not responded for 48 hours please send me a pm as I don't always get notifications.

My help is always free, however, if you would like to make a donation to me for the help I have provided please click here

DllUnregisterServer procedure not found in C:\WINDOWS\system32\cetmpidx.dllC:\WINDOWS\system32\cetmpidx.dll NOT unregistered.C:\WINDOWS\system32\cetmpidx.dll moved successfully.C:\WINDOWS\system32\qqtss.ini2 moved successfully.C:\WINDOWS\system32\aqVreo01 moved successfully.C:\WINDOWS\system32\hjjlm.ini2 moved successfully.C:\WINDOWS\system32\5094b22e moved successfully.File/Folder C:\WINDOWS\system32\cetmpidx.dll not found.C:\Program Files\Viewpoint\Viewpoint Toolbar\del9C.tmp moved successfully.C:\Program Files\Viewpoint\Viewpoint Toolbar moved successfully.C:\Program Files\Viewpoint\Viewpoint Media Player\NewComponents moved successfully.C:\Program Files\Viewpoint\Viewpoint Media Player\DownloadedComponents\VMgr_Win moved successfully.C:\Program Files\Viewpoint\Viewpoint Media Player\DownloadedComponents\AxMetaStream_Win moved successfully.C:\Program Files\Viewpoint\Viewpoint Media Player\DownloadedComponents moved successfully.C:\Program Files\Viewpoint\Viewpoint Media Player\Components moved successfully.C:\Program Files\Viewpoint\Viewpoint Media Player moved successfully.C:\Program Files\Viewpoint moved successfully.

Now click on Fix Checked and then close Hijackthis.=======================================================Please download ATF Cleaner by Atribune.This program is for XP and Windows 2000 onlyDouble-click ATF-Cleaner.exe to run the program.Under Main choose: Select AllClick the Empty Selected button.If you use Firefox browserClick Firefox at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.If you use Opera browserClick Opera at the top and choose: Select AllClick the Empty Selected button.NOTE: If you would like to keep your saved passwords, please click No at the prompt.Click Exit on the Main menu to close the program.For Technical Support, double-click the e-mail address located at the bottom of each menu.=========================Please do an online scan with Kaspersky WebScanner(This scanner is for use with internet explorer only)Click on "Accept"

You will be promted to install an ActiveX component from Kaspersky, Click Yes.

The program will launch and then begin downloading the latest definition files:

Once the files have been downloaded click on NEXT

Now click on Scan Settings

In the scan settings make that the following are selected:

Scan using the following Anti-Virus database:

Extended (if available otherwise Standard)

Scan Options:

Scan Archives
Scan Mail Bases

Click OK

Now under select a target to scan:Select My Computer

This will program will start and scan your system.

The scan will take a while so be patient and let it run.

Once the scan is complete it will display if your system has been infected.

Now click on the Save as Text button:

Save the file to your desktop.

Copy and paste that information in your next post.

Please do not pm for help, post it in the forums instead.

If I am helping you and have not responded for 48 hours please send me a pm as I don't always get notifications.

My help is always free, however, if you would like to make a donation to me for the help I have provided please click here

I ran Panda three times. All three times I had stepped out of the room - since it was taking over 2 hours per scan. When I came back in the room my computer screen was at the desktop so it must have rebooted each time on its' own. I have no log file! I know it was showing that there was 2 suspicious files and 1 hacking tools and rootkit warnings during the scan. OMG what should I do now???